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FIG.10D 
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RECEIVE MESSAGE THAT 
MEMBER HAS JOINED OR LEFT 
MULTICAST GROUP OF THE 
LOCAL DOMAIN 
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UPDATE ALL AFFECTED KEYS 
IN THE BRANCH OF THE BINARY 
TREE THAT CONTAINS THE 
JOINING OR LEAVING NODE 
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RECEIVE NEW GROUP SESSION 
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1100 MULTICAST SECURITY SYSTEM 



1102 

OPERATIONALLY OPTIMIZED DIFFIE-HELLMAN KEY EXCHANGE 

MECHANISM 



1104 

IMPROVED SESSION KEY EXCHANGE MECHANISM 



1106 

MULTICAST PROXY SERVICE NODES DISTRIBUTED OVER LAN IN 
LOGICAL BINARY TREE 



1108 

MULTICAST GROUP MEMBER NODES THAT CAN ACT AS GROUP 
CONTROLLERS AND KEY DISTRIBUTION CENTERS AND ARE 
DISTRIBUTED OVER A WAN USING A DIRECTORY 
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KEY DISTRIBUTION USING REPLICATION OF TREE BRANCHES 



Fig. 11B 
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ESTABLISH MULTICAST PROXY SERVICE 
NODES DISTRIBUTED ACROSS A LAN 



1122 

CREATE AND STORE SECOND BINARY TREE THAT REPRESENTS MEMBER 
NODES, WHEREIN EACH MEMBER NODE IS REPRESENTED BY A LEAF 

NODE OF THE SECOND BINARY TREE THAT IS STORED IN A DOMAIN OF A 
DIRECTORY SERVICE THAT IS DISTRIBUTED ACROSS THE WAN, AND 
WHEREIN EACH OF THE MEMBER NODES CAN ESTABLISH MULTICAST 
COMMUNICATION AND SERVE AS A KEY DISTRIBUTION CENTER 



1124 

CREATE AND STORE GROUP SESSION KEY IN ASSOCIATION WITH 
MULTICAST GROUP AND A PRIVATE KEY ASSOCIATED WITH EACH 
NODE IN THE GROUP USING SECURE KEY EXCHANGE 



WHEN A NEW MEMBER NODE JOINS THE MULTICAST GROUP, 
DETERMINE A NEW GROUP SESSION KEY BY REPLICATING A BRANCH 
OF THE SECOND BINARY TREE 



